ansible_playbook_servers/templates/files/nginx/sites/files.l3d.ch_tls.conf

server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;

  server_name files.l3d.ch;

  include snippets/tls_parameters_{{ site.name }}.snippet.conf;
  include snippets/tls_certificate_{{ site.name }}.snippet.conf;
  include snippets/logging_{{ site.name }}.snippet.conf;

  root /srv/www/files.l3d.ch;

  add_header Access-Control-Allow-Origin "*";

  location / {
    autoindex off;
    try_files $uri $uri/ =418;
  }
  location /share/ {
    autoindex on;
    autoindex_exact_size off;
    autoindex_localtime on;
  }

  location = /hidden/ {
    autoindex off;
    return 418;
  }

  location ~ /hidden/[0-9a-zA-Z_]+/ {
    autoindex on;
    autoindex_exact_size off;
    autoindex_localtime on;
  }
}